FedRAMP-Compliant Cloud or IT Service Provider

The contract requires a cloud-based or IT service provider to support the storage and processing of contract-related data containing covered defense information, adhering strictly to FedRAMP Moderate security requirements. This subcontract is issued under the North American Industry Classification System code 518210 for data processing, hosting, and related services, and is associated with the Defense Logistics Agency under the Department of Defense. The provider must ensure all systems and operations meet the federal government’s standardized security controls for moderate impact systems, safeguarding sensitive defense data throughout its lifecycle in the cloud environment. Performance of the work is not confined to a specific geographic location but must comply with federal cybersecurity mandates regardless of where the services are delivered. All activities under this contract must align with federal procurement standards and security protocols, ensuring interoperability and compliance with Department of Defense information assurance policies. The service provider is expected to maintain continuous authorization under FedRAMP Moderate, demonstrate robust incident response and data protection measures, and support audit readiness for ongoing compliance verification. The contract reference is linked to the DIBBS system under award SPE60526D8506 and delivery order SPE60526FHXF2, establishing formal accountability and oversight through official defense contracting channels, with no set-aside classification applied.